AnswerVault is created and operated by Catapult (Catapult CX Limited). This privacy statement applies to all AnswerVault services and products.
What data do we collect?
Catapult, hereby after referred to as CCX, collects the following data:
- Personal identification information through voluntarily completed contact forms or account registration, including your name, email address, and phone number.
- Account information when you register for and use the AnswerVault service.
How do we collect your data?
You directly provide CCX with most of the data we collect. We collect data and process data when you:
- Register for or use the AnswerVault service.
- Voluntarily complete contact forms.
- Use or view our website via your browser's cookies.
How will we use your data?
CCX collects your data so that we can:
- Respond to customer inquiries
- Contact you with marketing material, should you opt into receiving marketing materials
CCX will not share your data with third parties for marketing purposes.
How do we store your data?
Marketing and contact form data is stored on HubSpot servers. AnswerVault application data (accounts, indexed content, embeddings, and metadata) is stored on encrypted infrastructure hosted in the EU and UK. For full details of how AnswerVault processes your documents, see the section below.
CCX will keep your personal data for five years. Once this time period has expired, your data will automatically be purged from CCX's servers.
Marketing
CCX would like to send you information about services of ours that we think may be beneficial to your company.
If you have agreed to receive marketing, you may always opt out at a later date. You have the right at any time to stop CCX from contacting you for marketing purposes.
If you no longer wish to be contacted for marketing purposes, you will have the right to unsubscribe via any marketing email that is sent to you.
What are your data protection rights?
CCX would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
- The right to access – You have the right to request CCX for copies of your personal data. We may charge you a small fee for this service.
- The right to rectification – You have the right to request that CCX corrects any information you believe is inaccurate. You also have the right to request CCX to complete the information you believe is incomplete.
- The right to erasure – You have the right to request that CCX erase your personal data, under certain conditions.
- The right to restrict processing – You have the right to request that CCX restrict the processing of your personal data, under certain conditions.
- The right to object to processing – You have the right to object to CCX processing of your personal data, under certain conditions.
- The right to data portability – You have the right to request that CCX transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: info@catapult.cx
How AnswerVault processes your documents
When you connect a document source (such as SharePoint, Google Drive, or Confluence) to AnswerVault, the following data processing takes place:
- Indexing — Document content is ingested and processed to create vector embeddings and a structured knowledge graph. This allows the system to retrieve relevant information when you ask questions.
- Storage — Indexed content (embeddings, graph data, and document metadata) is stored in encrypted form within your tenant's isolated environment. All stored data is encrypted at rest using AES-256-GCM.
- Tenant isolation — Each customer's data is logically isolated at the database level with per-tenant encryption keys. One customer's data cannot be accessed by or decrypted with another customer's keys.
- AI processing — When you ask a question, relevant document context is sent to our managed AI infrastructure to generate an answer. We do not use your data to train AI models. AI-generated responses are not stored beyond the session unless you choose to save them.
- Retention — Indexed content is retained for as long as your account is active and the connected data source remains linked. When you disconnect a data source or delete your account, all associated indexed content (embeddings, graph data, and metadata) is deleted within 90 days.
- Data residency — Customers on Business and Enterprise tiers can choose the geographic region where their data is stored and processed. See our Security page for details.
For enterprise customers requiring a formal Data Processing Agreement (DPA), please contact us at info@catapult.cx.
Cookies
This website uses strictly necessary cookies and optional analytics cookies (Google Analytics). Analytics cookies are only set after you give consent via the cookie banner. No cookies are used for advertising or cross-site tracking.
For full details of the cookies we use, see our Cookie Policy.
Privacy policies of other websites
The CCX website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.
Changes to our privacy policy
CCX keeps its privacy policy under regular review and places any updates on this web page.
How to contact us
If you have any questions about CCX's privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.
Email us at: info@catapult.cx
Call us: +44 203 773 6323
This privacy policy was last updated on 12/03/2026